writeups.xyz / Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability (CVE-2022-44666) (0day).

Submitter : c2a

Date: 15 February 2023

Bounty : undisclosed

Vulnerabilities :

• RCE

Programs :

• Microsoft (Windows)

Authors :

• J00sean (@J00sean)

Link :
https://github.com/j00sean/CVE-2022-44666